Remove File Restore

File Restore is fake hard drive diagnostic program which will definitely show pop ups to tell the user that the hard drive of the computer perform badly. File Restore CANNOT detect and remove any kind of hard drive problem. File Restore can only cheat the user to purchase the full version of File Restore so that to removed the detected problems. Do not believe any pop ups or report shown by File Restore. All of them is a lie.

File Restore can be uninstalled by by stopping all processes with random name and also kill its files. Then, all registry entries added and modified by File Restore must be cleared by using Windows Registry Editor.

File Restore, after installed, usually will display a lot of pop-up alerts that attempt to make users believe that it has detected multiple problems on the system that it is installed on. Naturally, some computer users will try to take action to remove those threats simply by purchasing a full edition of File Restore. After doing so, users will later find out that File Restore is incapable of ridding their system of any type of problem and will continually bombard them with deceptive pop-up messages. The only thing to do with File Restore is remove either manually or by using an updated spyware detection tool. It show an overview of the hard drive status. Do not believe the overview.

File Restore should be removed immediately!

File Restore Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = "Yes"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '.zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'


Remove Folders and Files

%CommonAppData%\[random]
%CommonAppData%\[random].exe
%CommonAppData%\[random]
%CommonAppData%\-[random]
%StartMenu%\Programs\File Restore
%Temp%\smtmp
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\File_Restore.lnk
%UserProfile%\Desktop\File Restore.lnk